Skip to content
OpenAdvisories

Archive

29 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /29 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-2249 Public exploit

    SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload

    The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attac…

    sojweb SoJ SoundSlides Web / CMS
  • High 8.8
    CVE-2025-2006

    Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload

    The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticate…

    berrypress Inline Image Upload for BBPress Web / CMS
  • High 7.3
    CVE-2025-2803

    So-Called Air Quotes <= 0.1 - Unauthenticated Arbitrary Shortcode Execution

    The So-Called Air Quotes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_s…

    davemacd So-Called Air Quotes Web / CMS